Search and destroy of the controllers is more effective
i.e. 1 controller = 100K downed bots. (example)
But ... the acquisition cost or re-acquisition cost or rendezvous cost
is zero, and the controller may simply be the current lease holder ...
There are assets that have different temporal properties than the set
of write-side nodes, which frankly, appear to twinkle.
BTW, my research interest is in spam/http (e.g., comment spam on blogs),
not spam/smtp, and in my problem space the write-side is as intractible,
address list, content signature, authentication exchanges, and so on,
so my interest is on the read-side.
Milage varies, but this is research, so I've no idea what I'm doing.
Eric
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg